$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b28a2bae-5211-3845-b367-c52003c6448b.roa File: b28a2bae-5211-3845-b367-c52003c6448b.roa (raw, json) Hash identifier: Z8+fLMk+LIyT1MJxPTCMGZ90H+ZD6W3zdk6xtmnKg+Q= Subject key identifier: BB:04:DA:4F:CB:0A:8D:1E:CA:2A:55:F9:3E:64:FF:D5:DB:52:10:E3 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D773A7F63B9CC1D6300A9D5A0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b28a2bae-5211-3845-b367-c52003c6448b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 395793 IP address blocks: 50.3.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:7f:63:b9:cc:1d:63:00:a9:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=ba5964d5-cb99-49c1-a622-c385530e83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:e1:06:22:a4:a7:ae:b1:d2:6c:27:51:ad: 59:6d:aa:fb:2e:66:2f:09:3a:c8:30:38:1e:61:64: c1:14:b3:c3:12:b3:f5:4a:29:08:81:95:29:43:68: c8:b5:83:13:7b:29:b9:79:1c:80:06:ec:6a:06:f6: 6e:4f:06:f8:1d:61:ce:37:68:00:00:58:c7:26:91: af:88:a4:7e:c7:6f:41:fb:ec:4a:64:93:be:1b:ae: 2a:93:35:1e:59:a0:4c:1d:f9:7e:66:18:68:d7:de: e0:19:22:eb:d1:65:6d:96:33:51:74:af:c1:f7:14: bf:a5:09:f8:82:ec:81:9b:d1:fe:a8:62:65:12:e8: 45:79:0f:6d:4f:04:bd:3d:b3:34:fa:e5:52:e6:b7: 52:42:50:21:66:98:c6:ea:e0:d8:7b:ff:58:70:06: e2:c9:d9:3d:16:2d:95:04:5c:89:92:0d:62:11:7f: c6:f3:ea:12:27:30:b7:fb:2a:c7:72:d2:f7:4f:d6: fe:34:3d:5a:d9:6e:7a:5a:d2:ef:ce:5c:fe:bc:44: 7b:36:ec:d5:41:77:39:64:b8:3d:68:03:ca:37:a5: b0:a5:24:39:52:d7:a6:1a:78:44:e9:c5:74:8a:d0: d4:fa:cd:77:e3:81:20:9a:75:24:77:c9:4b:14:39: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:DA:4F:CB:0A:8D:1E:CA:2A:55:F9:3E:64:FF:D5:DB:52:10:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b28a2bae-5211-3845-b367-c52003c6448b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:df:87:32:b1:12:b3:a0:37:04:12:f3:86:45:34:4d:2a:2b: 5c:9d:e2:df:47:d6:a6:d3:03:d9:ac:7c:f7:39:0d:fb:31:1f: e2:81:54:f2:b4:95:87:b7:c6:46:fd:ff:bb:c8:93:70:60:d9: 47:a1:2b:d7:e3:75:64:a5:65:83:14:f4:aa:e3:9c:d3:72:e7: 3e:10:18:58:8c:c1:82:91:a4:92:7e:7f:b8:a7:15:c0:ef:f3: 78:a8:2f:0d:32:e9:8c:bb:07:8d:69:8e:3d:70:1a:2c:ed:f7: a5:22:ff:7b:6a:a0:7c:26:b0:87:41:26:ee:4c:4f:1e:05:b6: 9c:5b:a9:ca:18:24:57:b6:81:5c:b6:73:a2:e7:d8:9e:71:b2: 1a:04:3b:90:26:2a:0a:73:6a:21:53:f0:bc:37:c9:c5:b9:d1: 9e:dc:4e:8b:db:5d:1a:f2:f5:a5:80:26:1b:77:f1:e9:87:f0: 1a:02:b8:f9:42:b9:08:19:db:52:1c:a0:41:32:a3:c0:b8:dd: c1:a5:78:2e:49:fc:92:cf:55:3d:83:a0:b9:96:ec:96:96:f7: 8f:85:8b:06:e9:00:ed:14:11:93:78:1b:eb:31:3d:00:a2:1f: ba:ad:a4:98:88:57:59:84:a2:09:05:a1:2a:bd:a4:36:53:09: 38:d1:86:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13On9jucwdYwCp1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YmE1OTY0ZDUtY2I5OS00OWMxLWE2MjItYzM4NTUzMGU4M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LhBiKkp66x0mwnUa1Zbar7LmYvCTrIMDge YWTBFLPDErP1SikIgZUpQ2jItYMTeym5eRyABuxqBvZuTwb4HWHON2gAAFjHJpGv iKR+x29B++xKZJO+G64qkzUeWaBMHfl+Zhho197gGSLr0WVtljNRdK/B9xS/pQn4 guyBm9H+qGJlEuhFeQ9tTwS9PbM0+uVS5rdSQlAhZpjG6uDYe/9YcAbiydk9Fi2V BFyJkg1iEX/G8+oSJzC3+yrHctL3T9b+ND1a2W56WtLvzlz+vER7NuzVQXc5ZLg9 aAPKN6WwpSQ5UtemGnhE6cV0itDU+s1344EgmnUkd8lLFDnakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsE2k/LCo0eyipV+T5k/9XbUhDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjI4YTJiYWUtNTIxMS0z ODQ1LWIzNjctYzUyMDAzYzY0NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzfhzKxErOgNwQS84ZFNE0qK1yd4t9H1qbTA9msfPc5DfsxH+KBVPK0 lYe3xkb9/7vIk3Bg2UehK9fjdWSlZYMU9KrjnNNy5z4QGFiMwYKRpJJ+f7inFcDv 83ioLw0y6Yy7B41pjj1wGizt96Ui/3tqoHwmsIdBJu5MTx4FtpxbqcoYJFe2gVy2 c6Ln2J5xshoEO5AmKgpzaiFT8Lw3ycW50Z7cTovbXRry9aWAJht38emH8BoCuPlC uQgZ21IcoEEyo8C43cGleC5J/JLPVT2DoLmW7JaW94+FiwbpAO0UEZN4G+sxPQCi H7qtpJiIV1mEogkFoSq9pDZTCTjRhkM= -----END CERTIFICATE-----Generated at Sat Apr 18 06:05:29 2026 by rpki-client